Cisco Cisco Firepower Management Center 2000 Guida Dello Sviluppatore

Pagina di 536
 
4-125
FireSIGHT eStreamer Integration Guide
 
Chapter 4      Understanding Discovery & Connection Data Structures
  Host Discovery and Connection Data Blocks
The following table describes the components of the Full Server data block.
Web
Application
Generic List Block Type (31)
Generic List Block Length
Web Application Data (123)*
Byte
0
1
2
3
Bit
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
Table 4-71
Full Server Data Block 4.10.0+ Fields 
Field
Data Type
Description
Full Server Block Type
uint32
Initiates a Full Server data block. This value is always 
104
.
Full Server Block 
Length
uint32
Total number of bytes in the Full Server data block, including 
eight bytes for the full server block type and length fields, plus 
the number of bytes of full server data that follows.
Port
uint16
Server port number.
Hits
uint32
Number of hits the server has received.
Generic List Block Type uint32
Initiates  a  Generic  List data block comprising data blocks of 
detected sub-server data. This value is always 
31
.
Generic List Block 
Length
uint32
Number of bytes in the Generic List data block, including the 
list header and all encapsulated sub-server information data 
blocks.
Sub-Server Information 
- Cisco Data Blocks *
variable
Full Server Information data blocks containing information 
about sub-servers for a host server detected by Cisco. See 
 for a description of 
this data block.
Generic List Block Type uint32
Initiates a Generic List data block comprising sub-server 
information data blocks conveying sub-server data added by a 
user. This value is always 
31
.
Generic List Block 
Length
uint32
Number of bytes in the Generic List data block, including the 
list header and all encapsulated server information data blocks.
Sub-Server 
Information- User 
Added Data Blocks *
variable
Full Server Information data blocks containing information 
about sub-servers on a host added by a user. See 
 for a description of this 
data block.
Generic List Block Type uint32
Initiates a Generic List data block comprising sub-server 
information data blocks conveying sub-server data added by a 
scanner. This value is always 
31
.
Generic List Block 
Length
uint32
Number of bytes in the Generic List data block, including the 
list header and all encapsulated sub-server information data 
blocks.